HP V1905 Series, Руководство по началу работы

Страница: 63 / 135

58
Click Device

ACL

IP Based ACL

Setup . The IP Based ACL Setup Page opens.
Figure 95 IP Based ACL Setup Page
The IP Based ACL Setup Page contains the following fields:
Table 76 IP Based ACL Setup Page item description
Item Description
Selection ACL Selects an existing IP-based ACL to which rules are to be added.
Create ACL
Defines a new user-defined IP-based Access Control List. The options are as follows:

ACL Priority: Sets the ACL priority. The possible field values are 1-100.

Rule Priority Type: Sets the rule priority type. CONFIG: You will have to configure the
ACL rule priority by yourself, AUTO: the ACL rule priority will be configured
automatically.
Priority
Sets the rule priority, which determines which rule is matched to a packet on a first-match
basis. The possible field values are 1-65535.
Protocol
Defines the protocol in the rule to which the packet is matched. The possible fields are:

Select from List: Selects a protocol from a list by which packets are matched to the
rule.

Protocol ID: Selects a protocol ID from a list by which packets are matched to the rule.
Source Port
Defines the source port that is used for matched packets. Enabled only when TCP or UDP
are selected in the Protocol list. The field value is either user defined or Any. If Any is
selected, the IP based ACL is applied to any source port.
Destination Port
Defines the destination port that is used for matched packets. Enabled only when TCP or
UDP are selected in the Protocol list. The field value is either user defined or Any. If Any
is selected, the IP based ACL is applied to any destination port.
TCP Flags
If checked, enables configuration of TCP flags matched to the packet. The possible fields
are:

Urg: Urgent pointer field significant. The urgent pointer points to the sequence
number of the octet following the urgent data.

Ack: Acknowledgement field significant. The acknowledgement field is the byte
number of the next byte that the sender expects to receive from the receiver.

Psh: Push (send) the data as soon as possible, without buffering. This is used for
interactive traffic.

Rst: Reset the connection. This invalidates the sequence numbers and aborts the
session between the sender and receiver.

Syn: Synchronize Initial Sequence Numbers (ISNs). This is used to initialize a new